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DETAILED ACTION 



Claim Rejections - 35 USC §102 



1. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the EngHsh language. 

2. Claims 1-82 rejected under 35 U.S.C 102(e) as being anticipated by Boyd et al 
(hereinafter, "Boyd", 6,112,238). 

As per claim 1, Boyd discloses a system for analyzing and monitoring Internet traffic, 
comprising: 

• a relational database (col. 3, lines 33-61 and col. 4, Hnes 30-49); 

• a log engine that processes log files from at least one internet server and stores data 
processed from the log files in the relational database (col. 3, lines 33-61 and coL 4, 
lines 30-49) ; and 

• a report engine that generates reports based on the processed data stored in the relational 
database (col 4, lines 30-49 and col 5, lines 11-25). 

As per claim 2, Boyd discloses: 

• wherein the relational database comprises a plurality of hash tables (col. 4, lines 30-49, 
col. 5, lines 11-25 and col 6, lines 18-29). 

As per claim 3, Boyd discloses: 
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• a visitor table that stores traffic information generated by a visitor to an Internet site 
hosted by the least one Internet server (col. 6, lines 18-67 and col. 7, lines 1-23); and 

• a plurality of data tables, wherein each data table stores records related to a respective 
parameter (col. 6, lines 18-67 and col. 7, lines 1-23). 

As per claim 4, Boyd discloses: 

• wherein the visitor table comprises at least one pointer to at least one record stored in at 
least one of the data tables (col. 6, lines 18-67 and col. 7, lines 1-23). 

As per claim 5, Boyd discloses wherein the respective parameters comprise: 

• domain names from which the visitor originated (col. 6, lines 18-67 and col. 7,lines 1- 
23); 

• web browsers used by the visitor (col 6, lines 18-67 and col. 7, lines 1-23); and 

• other internet sites that referred the visitor to the Internet site (col. 6, lines 18-67 and 
col. 7, lines 1-23). 

As per claim 6, Boyd discloses a system for analyzing and monitoring internet traffic 
generated by visitors to at least one internet site hosted by at least one internet server, 
comprising: 

• a visitor centric database (col. 3, lines 33-61 and col. 4, lines 30-49); 

• a log engine that receives log files from the at least one internet server, processes hits 
logged in each log file, and stores traffic data derived fi-om the hits in the visitor centric 
database, wherein the visitor centric database associates the traffic data derived from the 
hits with a visitor that generated the hit (col. 3, lines 33-61 and col. 4, lines 30-49); and 

• a report engine that generates reports using the traffic data stored in the visitor 
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centric database (col. 4, lines 30-49 and col. 5, lines 11-25). 

As per claims 40, 62 and 63, Boyd discloses a system for analyzing and monitoring Internet 
traffic generated by visitors to at east one Internet site hosted by at least one Internet server, 
comprising: 

• means for receiving log files from the at least one internet server ; (coL 3, lines 33-61 and 
col. 4, lines 30-49) 

• means for processing hits logged in each log file (col. 3, lines 33-61 and col 4, lines 30- 
49); 

• means for storing traffic data derived from the hits in a database (col. 3, lines 33-61 and 
col. 4, lines 30-49); 

• means for associating the traffic data derived from the hits and stored in the 
database with a visitor that generated the hit (col. 3, lines 33-61 and col. 4, lines 30- 
49);and 

• means for generating reports using the associated traffic data stored in the database (col. 
4, lines 30-49 and col. 5, lines 1 1-25), 

As per claims 7, 41 and 64, Boyd discloses: 

• wherein the visitor centric database comprises a plurality of hash tables (col. 4, lines 
30-49, col. 5, lines 11-25 and col. 6, lines 18-29). 

As per claims 8, 42, and 65 Boyd discloses wherein the plurality of hash tables comprise: 

• a visitor table that stores traffic information derived from the hits, wherein the 
visitor table contains a unique visitor record for each visitor (col. 6, lines 18-67 and 
col. 7, lines 1-23); and 
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• a plurality of data tables, wherein each data table stores data related to a respective 
non-unique parameter (col. 6, lines 18-67 and col. 7, lines 1-23). 

As per claims 9, 43 and 66, discloses: 

• wherein the visitor table comprises at least one pointer to at least one record stored in 
at least one of the data tables (col. 6, lines 18-67 and col. 7, lines 1-23). 

As per claim 10, discloses wherein the respective non-unique parameters comprise: 

• domain names from which the visitors originated ; (col. 6, lines 18-67 and col, 7, lines 
1-23) 

• web browsers used by the visitors (col. 6, lines 18-67 and col. 7, lines 1-23); and 

• other internet sites that referred the visitors to the at least one internet site (col. 6, lines 
18-67 and col. 7, lines 1-23). 

As per claims 1 1 and 44, Boyd discloses: 

• wherein the log engine comprises a database buffer that temporarily stores the traffic 
data derived from the hits logged in the log files (col. 3, lines 33-61 and col. 4, lines 30- 
49). 

As per claim 12, Boyd discloses: 

• wherein the log engine further comprises a database updater that transfers the traffic 
data temporarily stored in the database buffer to the visitor centric database (col. 3, lines 
33-61 and col 4, lines 30-49). 

As per claims 13 and 46, Boyd discloses: 
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• wherein the database updater sorts the traffic data temporarily stored in the database 
buffer before transferring the traffic data to the visitor centric database (col. 3, lines 33- 
61 and col. 4, lines 30-49). 

As per claims 14 and 14, Boyd discloses: 

• wherein the log engine comprises a log parser that reads log lines in the log files, and 
separates each log file into individual fields (col 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 15, Boyd discloses: 

• wherein the log parser is adapted to process the log lines in real time as each hit is 
logged to a log file (col, 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 16, Boyd discloses: 

• wherein the log engine is configured to process hits from multiple internet sites that are 
logged to a single log file (col. 3, lines 33-61 and col. 4, Hnes 30-49). 

As per claim 17, Boyd discloses: 

• wherein the log engine comprises a website identifier that identifies a source of each hit 
(col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 18, Boyd discloses: 

• wherein the log engine comprises a visitor identifier that determines if a hit originates 
from a new visitor or an existing visitor (col. 3, lines 33-61 and col. 4, lines 30-49) 

As per claim 19, Boyd discloses: 

• wherein the visitor identifier is adapted to create a new visitor record if a hit originates 
from a new visitor (col. 3, lines 33-61 and col. 4, lines 30-49), 

As per claim 20, Boyd discloses: 
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• wherein the log engine comprises a domain name system (DNS) resolver that 
determines host and domain information for each visitor (col. 3, Hnes 33-61 and col. 4, 
lines 30-49). 

As per claim 21, Boyd discloses: 

• wherein the DNS resolver utilizes reverse DNS resolution to determine the host and 
domain information for each visitor (col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 22, Boyd discloses: 

• wherein the log engine is adapted to process e-commerce log files that contain 
information on money spent by a visitor (col. 3, lines 33-61 and col 4, lines 30-49). 

As per claim 23, Boyd discloses: 

• wherein the report engine is adapted to generate reports that correlate money spent by a 
visitor to any other parameter of the traffic data (col. 4, lines 30-49 and col. 5, lines 1 1- 
25) 

As per claim 24, Boyd discloses: 

• wherein the report engine is adapted to generate a top products report that ranks 
products purchased by visitors based on revenues generated by the products (col. 4, 
lines 30-49 and col. 5, lines 1 1-25). 

As per claim 25, Boyd discloses: 

• wherein the report engine is adapted to generate at least one of a totals report, product 
tree report, regions report, and top scores report (col. 4, lines 30-49 and col 5, lines 1 1- 
25). 

As per claim 26, Boyd discloses: 
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• wherein the report engine is adapted to generate a report that displays a value of at least 
one traffic data parameter over at least one predetermined time period (col. 4, lines 30- 
49 and col. 5, lines 11-25). 

As per claim 27, Boyd discloses: 

• wherein the report comprises a snapshot report in which the at least one predetermined 
time period comprises seven consecutive 24 hour time periods (col. 4, lines 30-49 and 
col 5, lines 11-25). 

As per claim 28, Boyd discloses: 

• wherein the report comprises an hourly graph report in which the at least one 
predetermined time period comprises a plurality of consecutive one hour time periods 
(col. 4, lines 30-49 and col. 5, Hnes 1 1-25). 

As per claim 29, Boyd discloses: 

• wherein the report engine is adapted to generate a top pages report that ranks website 
pages based on number of visitors to the website pages (col. 4, lines 30-49 and col. 5, 
lines 11-25). 

As per claim 30, Boyd discloses: 

• wherein each entry in the top pages report comprises a link for accessing additional 
information about a respective website page (col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 31, Boyd discloses: 

• wherein the report engine is adapted to generate a search engine report that displays a 
list of most used search engines (col. 4, lines 30-49 and col. 5, lines 1 1-25) 

As per claim 32, Boyd discloses: 
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• wherein the report engine is adapted to generate a top domains report that displays 
regional and network information about the visitors (col. 4, lines 30-49 and col. 5, lines 
11-25) 

As per claim 33, Boyd discloses: 

• wherein the report engine is adapted to generate a browser tree report that ranks internet 
browsers based on which internet browsers are used most by visitors to a website (col. 
4, lines 30-49 and col. 5, lines 11-25) 

As per claim 34, Boyd discloses: 

• wherein each internet browser entry in the browser tree report includes a link for 
accessing information about different versions of a respective internet browser (col. 3, 
lines 33-61 and col. 4, lines 30-49). 

As per claim 35, Boyd discloses: 

• wherein the report engine is adapted to generate a top entrances report that ranks starting 

points of visitors to a website based most used starting points (col. 4, lines 30-49 and 
col. 5, lines 11-25). 

As per claim 36, Boyd discloses wherein the report engine is adapted to generate at least 

• one of a summary report, a daily graph report, a monthly graph report, a top servers 

report, a file types report, a status/errors report, a posted forms report, a top referrals 
report, a top keywords report, a referral tree report, a domain tree report, a top countries 
report, a platform tree report, atop combos report, a top exits report, a click through 
report, a depth of visit report, a length of visit report, and a usemames report (col. 3, 
lines 33-61 and col. 4, lines 30-49). 
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As per claim 37, Boyd discloses wherein the report engine comprises: 

• a template module that stores report templates (col. 3, lines 33-61 and col. 4, lines 30-49); 

• a session parser that receives report requests from the at least one server, and 
determines a type of report requested, data needed to generate a requested report and a 
format for the requested report (col. 3, lines 33-61 and col. 4, lines 30-49); 

• an authenticator that receives an identity of a report requester from the session 
parser, and verifies that the report requester has permission to view a requested report 
(col. 3, lines 33-61 and col. 4, lines 30-49), 

• a data query module that receives authentication information from the 
authenticator, and that queries the database for data needed to generate the requested 
report if the report requester has permission to view the requested report (col. 3, lines 33- 
61 and col. 4, lines 30-49); and 

• a format output module that receives the data needed to generate the requested 
report from the database, retrieves templates for the requested report from the template 
module, creates the requested report, and delivers the requested report to the report 
requester (col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 38, Boyd discloses: 

• wherein the template module also stores at least one dictionary (col. 3, lines 33-61 and 
col 4, lines 30-49). 

As per claim 39, Boyd discloses: 

• wherein the format output module is adapted to create the requested report in 
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a selectable language using the at least one dictionary (col. 3, lines 33-61 and col. 4, lines 
30-49). 

As per claim 45, Boyd discloses: 

• wherein the storing means comprises database update means for transferring the traffic 
data temporarily stored in the buffer means to the database (col. 3, lines 33-61 and col. 4, 
lines 30-49). 

As per claim 48, Boyd discloses: 

• wherein the log parser means processes the log lines in real time as each hit is logged to a 
log file (col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 49, Boyd discloses: 

• wherein the processing means processes hits originating from muhiple internet sites and 
logged to a single log file (col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 50, Boyd discloses: 

• wherein the processing means comprises website identification means that identifies a 
source of each hit (col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 51, Boyd discloses: 

• wherein the processing means comprises visitor identification means that determines if a 
hit originates from a visitor with a preexisting visitor record in the database (col. 3, lines 
33-61 and col. 4, lines 30-49) 

As per claim 52, Boyd discloses: 
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• wherein the visitor identification means creates a new visitor record if a hit originates 
from a visitor without a preexisting visitor record in the database (col. 3, lines 33-61 and 
coi. 4, lines 30-49) 

As per claim 53, Boyd discloses: 

• wherein the processing means comprises domain name system (DNS) resolver means 
that determines host and domain information for each visitor (col. 3, lines 33-61 and col. 
4, lines 30-49) 

As per claim 54, Boyd discloses: 

• wherein the DNS resolver means utilizes reverse DNS resolution to determine the host 
and domain information for each visitor (col 3, lines 33-61 and col. 4, lines 30-49) 

As per claim 55, Boyd discloses a system for analyzing and monitoring internet traffic 
generated by visitors to at least one internet site hosted by at least one internet server, 
comprising: 

• a database (col. 3, lines 33-61 and col. 4, lines 30-49); 

• a log engine that receives log files fi*om the at least one internet server, processes 

hits logged in each log file, and stores traffic data extracted from the processed hits in 
the database, wherein the log engine comprises (col. 3, lines 33-61 and col. 4, lines 30- 
49), 

• a database buffer that temporarily stores traffic data received from the database (col. 3, 
lines 33-61 and col. 4, lines 30-49), 

• a log parser that processes each hit in each log file, and separates each hit into its 
individual fields (col. 3, lines 33-61 and col. 4, lines 30-49), 
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• a visitor identifier that receives each hit's individual fields from the log parser, identifies 
each hit as originating from either a new visitor or an existing visitor, and creates a new 
visitor record in the database buffer if a hit originates from a new visitor (col 3, lines 
33-61 and col. 4, lines 30-49), 

• a buffer updater that, prior to processing a new log file, copies previously stored data from the datab 
to the database buffer, and wherein, for each hit, the buffer updater locates in the database buffer the 
visitor record identified or created by the visitor identifier for a respective hit, and 

updates the identified or created visitor record in the database buffer with traffic data 
derived from the respective hit (col. 3, lines 33-61 and col. 4, lines 30-49), and 

• a database updater that copies updated traffic data from the database buffer to the 
database after all hits in the new log file have been processed (col. 3, lines 33-61 and 
col. 4, lines 30-49); and 

• a report engine that generates reports using the traffic data stored in the database (col. 4, 
lines 30-49 and col. 5, lines 11-25). 

As per claim 56, Boyd discloses: 

• wherein the log parser is updated to process each hit in real time as each hit is added to a log file 
(col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 57, Boyd discloses: 

• wherein the log engine further comprises a website identifier that identifies a source of 
each hit (col. 3, lines 33-61 and col. 4, lines 30-49), 

As per claim 58, Boyd discloses: 

• wherein the website identifier identifies the source of each hit from website identifier text received 
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from the log parser for each hit (col. 3, lines 33-61 and col. 4, lines 30-49) 
As per claim 59, Boyd discloses: 

• wherein the log engine further comprises a domain name system (DNS) resolver that determines hos 
and domain information for each visitor to an internet site (col. 3, lines 33-61 and col 4, 

lines 30-49) 

As per claim 60, Boyd discloses: 

• wherein the DNS resolver is adapted to process multiple DNS queries in parallel (col. 3, 

lines 33-61 and col. 4, lines 30-49). 
As per claim 61, Boyd discloses: 

• wherein the log engine is adapted to process e-commerce log files that contain 
information on money spent by the visitor (col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 67, Boyd further discloses: 

• the step of temporarily storing the traffic data derived fi-om the hits in a buffer prior to 
storing the traffic data in the database (col 3, lines 33-61 and col 4, lines 30-49). 

As per claim 68, Boyd further discloses; 

• the step of sorting the traffic data stored in the buffer prior to storing the traffic data in 
the database (col. 3, lines 33-61 and col 4, lines 30-49). 

As per claim 69, Boyd discloses: 

• wherein the step of processing hits logged in each log file comprises the steps of 
reading log lines in the log files (col. 3, lines 33-61 and col. 4, lines 30-49); and 
separating each log Hne into individual fields (col 3, lines 33-61 and col. 4, Hnes 30- 
49). 



Application/Control Number: 09/679,297 Page 15 

Art Unit: 2157 

As per claim 70, Boyd discloses: 

• wherein the hits logged in each log file are processed in real time as each hit is logged to 
a log file (col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 71, Boyd discloses: 

• wherein the processing step comprises processing hits originating fi-om multiple sources 
that are logged to a single log file (col. 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 72, Boyd further discloses: 

• the step of identifying a source from which each hit originates (col. 3, lines 33-61 and 
col. 4, lines 30-49). 

As per claim 73, Boyd discloses: 

• determining if a hit originates from a visitor with a preexisting visitor record in 
the database (col. 3, lines 33-61 and col. 4, lines 30-49); and 

• creating a new visitor record if the hit originates from a visitor without a preexisting 
visitor record in the database (col. 3, lines 33-61 and col, 4, lines 30-49). 

As per claim 74, Boyd further discloses: 

• the step of determining host and domain information for each visitor (col. 3, lines 33-61 
and col. 4, lines 30-49). 

As per claim 75, Boyd discloses: 

• wherein host and domain information for each visitor is determined using reverse 
domain name system (DNS) resolution (col 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 76, Boyd discloses a method of processing a log file to obtain traffic data, 
comprising the steps of 
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• copying previously stored traffic data from a database to a database buffer (col. 3, lines 
33-61 and col. 4, lines 30-49); 

• separating hits logged in the log file into individual fields (col. 3, lines 33-61 and col. 4, 
lines 30-49); 

• identifying each hit as originating from either a new visitor or an existing visitor; 

• creating a new visitor record in the database buffer if a hit originates from a new 
visitor (col. 3, lines 33-61 and col. 4, lines 30-49); 

• for each hit, locating the visitor record identified or created and updating the 
identified or created visitor record in the database buffer with traffic data derived from 
the respective hit (col. 3, Hnes 33-61 and col. 4, lines 30-49); 

• copying updated traffic data from the database buffer to the database after all hits 
in the log file have been processed (col 3, lines 33-61 and col. 4, lines 30-49). 

As per claim 77, Boyd further discloses: 

• the step of generating a report based on the traffic data in the database (col 4, lines 30- 
49 and col. 5, lines 11-25) 

As per claim 78, Boyd discloses: 

• wherein the hits logged to the log file are processed in real time as each hit is logged to the log file 
(col. 3, lines 33-61 and col. 4, lines 30-49). 

As per 79, Boyd discloses: 

• wherein hits originating from multiple sources are logged to the log file (col. 3, lines 33- 
61 and col. 4, lines 30-49). 

As per claim 80, Boyd further discloses: 
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• the step of identifying a source from which each hit originates (col. 3, lines 33-61 and 
col 4, Hnes 30-49) 

As per claim 81, Boyd further discloses: 

• the step of determining host and domain information for each visitor (col. 3, lines 33-61 
and col. 4, lines 30-49). 

As per claim 82, Boyd discloses: 

• wherein host and domain information for each visitor is determined using reverse 
domain name system (DNS) resolution (col. 3, lines 33-61 and col. 4, lines 30-49). 



Any inquiry concerning this communication or earlier communications from the 
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